Steve Grubb <sgrubb at redhat.com> writes: > I think the raw values should be available. The escaping could be a > library function just as interpret is a library function. Yes, I agree now. How does ausearch quote binary values? The manual page doesn't say.